Skip to content
Permalink
master
Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?

Malware-Misc-RE/2019-03-07-Dridex-Loader-10222-Object_Unpacked.csv

Go to file
 
 
Cannot retrieve contributors at this time
20 lines (19 sloc) 6.19 KB
Raw Blame
Open in GitHub Desktop
uuid event_id category type value comment to_ids date object_relation attribute_tag object_uuid object_name object_meta_category event_info event_member_org event_source_org event_distribution event_threat_level_id event_analysis event_date event_tag event_timestamp
5c80c55f-5804-4cd0-9635-704168f8e8cf 254 Network activity url http://95.140.38.248:8888/40K2Tp3afw/uudl44C1cY.png Dridex Download URL 1 1551943007 2019-03-07: Dridex Loader VK-Intel VK-Intel 1 Medium 0 2019-03-07 Banker: Dridex,Group: 10222,port: 3889, 443, 1443, 1801 ,malspam 1551944875
5c80c55f-63fc-4f32-9180-704168f8e8cf 254 Network activity url http://206.212.248.178:8080/1XfqZOf323/z69L131e1a.jpg Dridex Download URL 1 1551943007 2019-03-07: Dridex Loader VK-Intel VK-Intel 1 Medium 0 2019-03-07 Banker: Dridex,Group: 10222,port: 3889, 443, 1443, 1801 ,malspam 1551944875
5c80c6c5-b098-486f-a1b4-704f68f8e8cf 254 Network activity url 69.45.19.145:3889 Dirdex Loader Config URL 1 1551943365 2019-03-07: Dridex Loader VK-Intel VK-Intel 1 Medium 0 2019-03-07 Banker: Dridex,Group: 10222,port: 3889, 443, 1443, 1801 ,malspam 1551944875
5c80c6c5-d4c8-4186-bf78-704f68f8e8cf 254 Network activity url 95.211.148.20:1443 Dirdex Loader Config URL 1 1551943365 2019-03-07: Dridex Loader VK-Intel VK-Intel 1 Medium 0 2019-03-07 Banker: Dridex,Group: 10222,port: 3889, 443, 1443, 1801 ,malspam 1551944875
5c80c6c5-c4a0-4a03-9796-704f68f8e8cf 254 Network activity url 104.131.7.40:443 Dirdex Loader Config URL 1 1551943365 2019-03-07: Dridex Loader VK-Intel VK-Intel 1 Medium 0 2019-03-07 Banker: Dridex,Group: 10222,port: 3889, 443, 1443, 1801 ,malspam 1551944875
5c80c6c5-c990-463f-a080-704f68f8e8cf 254 Network activity url 128.199.247.176:1801 Dirdex Loader Config URL 1 1551943365 2019-03-07: Dridex Loader VK-Intel VK-Intel 1 Medium 0 2019-03-07 Banker: Dridex,Group: 10222,port: 3889, 443, 1443, 1801 ,malspam 1551944875
5c80cc48-e0c4-427c-b3fe-704468f8e8cf 254 Payload delivery malware-sample 2019-03-07-dridex-loader.unpacked.vk.dll|59042ee4a0285ba1b0a013e8436cc4c6 1 1551944776 malware-sample 5c80cc48-dee8-476e-81af-704468f8e8cf file file 2019-03-07: Dridex Loader VK-Intel VK-Intel 1 Medium 0 2019-03-07 Banker: Dridex,Group: 10222,port: 3889, 443, 1443, 1801 ,malspam 1551944875
5c80cc48-3ffc-4184-96d1-704468f8e8cf 254 Payload delivery filename 2019-03-07-dridex-loader.unpacked.vk.dll 0 1551944776 filename 5c80cc48-dee8-476e-81af-704468f8e8cf file file 2019-03-07: Dridex Loader VK-Intel VK-Intel 1 Medium 0 2019-03-07 Banker: Dridex,Group: 10222,port: 3889, 443, 1443, 1801 ,malspam 1551944875
5c80cc48-aad0-4e3f-8397-704468f8e8cf 254 Payload delivery md5 59042ee4a0285ba1b0a013e8436cc4c6 1 1551944776 md5 5c80cc48-dee8-476e-81af-704468f8e8cf file file 2019-03-07: Dridex Loader VK-Intel VK-Intel 1 Medium 0 2019-03-07 Banker: Dridex,Group: 10222,port: 3889, 443, 1443, 1801 ,malspam 1551944875
5c80cc48-dbf8-4cb9-8900-704468f8e8cf 254 Payload delivery sha1 8a8e72246db13ab23ad960343eaf9bda91dd6380 1 1551944776 sha1 5c80cc48-dee8-476e-81af-704468f8e8cf file file 2019-03-07: Dridex Loader VK-Intel VK-Intel 1 Medium 0 2019-03-07 Banker: Dridex,Group: 10222,port: 3889, 443, 1443, 1801 ,malspam 1551944875
5c80cc48-3818-4144-aec3-704468f8e8cf 254 Payload delivery sha256 db160d2bf7dead7017660258c9ec371e1ea994e8e04f039c9b5d208ab2be7fc0 1 1551944776 sha256 5c80cc48-dee8-476e-81af-704468f8e8cf file file 2019-03-07: Dridex Loader VK-Intel VK-Intel 1 Medium 0 2019-03-07 Banker: Dridex,Group: 10222,port: 3889, 443, 1443, 1801 ,malspam 1551944875
5c80cc48-d4ac-442e-88b6-704468f8e8cf 254 Other size-in-bytes 89600 0 1551944776 size-in-bytes 5c80cc48-dee8-476e-81af-704468f8e8cf file file 2019-03-07: Dridex Loader VK-Intel VK-Intel 1 Medium 0 2019-03-07 Banker: Dridex,Group: 10222,port: 3889, 443, 1443, 1801 ,malspam 1551944875
5c80cc5f-08e8-49d9-82b1-705b68f8e8cf 254 Payload delivery malware-sample 2019-03-07-dridex-loader.vk.exe|96bd4c32ebdd2afb9350742e826e907b 1 1551944799 malware-sample 5c80cc5f-5424-4a6b-8c2c-705b68f8e8cf file file 2019-03-07: Dridex Loader VK-Intel VK-Intel 1 Medium 0 2019-03-07 Banker: Dridex,Group: 10222,port: 3889, 443, 1443, 1801 ,malspam 1551944875
5c80cc5f-bd88-43b6-9f9b-705b68f8e8cf 254 Payload delivery filename 2019-03-07-dridex-loader.vk.exe 0 1551944799 filename 5c80cc5f-5424-4a6b-8c2c-705b68f8e8cf file file 2019-03-07: Dridex Loader VK-Intel VK-Intel 1 Medium 0 2019-03-07 Banker: Dridex,Group: 10222,port: 3889, 443, 1443, 1801 ,malspam 1551944875
5c80cc5f-89e0-4ef3-964f-705b68f8e8cf 254 Payload delivery md5 96bd4c32ebdd2afb9350742e826e907b 1 1551944799 md5 5c80cc5f-5424-4a6b-8c2c-705b68f8e8cf file file 2019-03-07: Dridex Loader VK-Intel VK-Intel 1 Medium 0 2019-03-07 Banker: Dridex,Group: 10222,port: 3889, 443, 1443, 1801 ,malspam 1551944875
5c80cc5f-a180-4d17-88e1-705b68f8e8cf 254 Payload delivery sha1 f5686a99f1c365123db1183ddef90d234b393413 1 1551944799 sha1 5c80cc5f-5424-4a6b-8c2c-705b68f8e8cf file file 2019-03-07: Dridex Loader VK-Intel VK-Intel 1 Medium 0 2019-03-07 Banker: Dridex,Group: 10222,port: 3889, 443, 1443, 1801 ,malspam 1551944875
5c80cc5f-70dc-4647-a78e-705b68f8e8cf 254 Payload delivery sha256 8d9c738c233e542d301bc700d2b1e7c443dc0c8e3fc1c0f699e3ddf63d3d9bca 1 1551944799 sha256 5c80cc5f-5424-4a6b-8c2c-705b68f8e8cf file file 2019-03-07: Dridex Loader VK-Intel VK-Intel 1 Medium 0 2019-03-07 Banker: Dridex,Group: 10222,port: 3889, 443, 1443, 1801 ,malspam 1551944875
5c80cc5f-40dc-4c5e-a4d2-705b68f8e8cf 254 Other size-in-bytes 147456 0 1551944799 size-in-bytes 5c80cc5f-5424-4a6b-8c2c-705b68f8e8cf file file 2019-03-07: Dridex Loader VK-Intel VK-Intel 1 Medium 0 2019-03-07 Banker: Dridex,Group: 10222,port: 3889, 443, 1443, 1801 ,malspam 1551944875